Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
File:                     28L_akYQUNSPP9sLUThxVLXWzQ4.cer (raw, json)
Hash identifier:          dUBmdYnQVyGssxWWouo2eeYR7e6AHqqBMBiTSNQB9Tw=
Subject key identifier:   DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9273465F2E21729A41FDFAED8C312
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:13 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 193.43.183.0/24
                          IP: 2001:67c:66c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:27:34:65:f2:e2:17:29:a4:1f:df:ae:d8:c3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:e5:03:3c:2f:d4:ba:12:58:99:93:d0:7a:
                    20:4d:29:d9:40:77:20:12:17:14:97:3c:72:73:c4:
                    94:d3:b3:56:85:47:6c:c4:db:72:de:0c:5e:02:96:
                    3a:1a:f8:0a:a8:9d:85:db:34:13:05:c7:d4:5c:86:
                    6f:52:3d:1f:99:a6:2b:fd:ad:17:cc:9d:e2:9c:72:
                    79:36:ef:8d:b5:6f:a2:15:4d:08:81:b4:90:d5:93:
                    01:53:c6:5e:0e:ac:03:fc:38:14:f7:55:e5:68:17:
                    37:a7:ce:27:2a:4b:e4:40:42:a2:93:67:93:ff:a9:
                    5e:a0:ab:b9:2a:81:82:32:f6:f2:5a:af:2d:2c:ab:
                    a4:88:0c:de:42:c8:fe:3e:6f:e1:36:92:ec:c5:7d:
                    0b:38:b5:07:3e:90:4e:eb:9f:55:b3:2a:4e:35:b4:
                    90:4a:7b:09:58:32:cb:95:4e:f2:1a:c0:6c:d2:97:
                    bd:38:57:cd:9c:b2:17:d3:10:f7:c7:e4:97:66:d2:
                    05:19:29:bb:a7:f1:c1:b8:bc:0d:2b:78:47:0d:28:
                    c6:1b:18:e1:9b:2f:2f:03:4f:7f:f9:67:94:7b:4a:
                    e6:20:2d:b7:43:59:c8:7b:31:54:6f:b6:1d:79:5c:
                    9e:1c:19:2a:47:11:52:1a:a0:a7:41:3b:eb:17:93:
                    81:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.43.183.0/24
                IPv6:
                  2001:67c:66c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:5d:ce:ae:06:4c:69:eb:98:76:be:41:ac:d3:73:b5:0a:01:
         00:56:6c:71:32:cb:f4:e8:3c:91:bd:b7:6f:75:a2:39:35:22:
         2b:29:53:e2:d0:9b:35:f3:07:ce:92:50:af:04:6b:69:80:7b:
         50:cd:d0:7f:9d:ac:30:b4:1f:9f:da:e5:85:38:44:ad:ee:e6:
         c1:db:ab:08:b7:ce:0f:3b:59:8e:e0:49:2f:e9:c2:e4:6d:91:
         9c:7e:20:54:36:d5:06:e5:b1:77:a0:d9:fd:e3:9b:15:3d:de:
         ac:81:f6:e6:1a:48:fa:03:86:28:3a:f9:c2:95:bd:74:ee:84:
         d3:29:6a:67:92:ea:46:15:a2:ef:81:48:d7:a9:36:5a:e5:93:
         c1:cd:f3:4a:30:63:ac:a0:73:07:db:a1:18:e3:06:2c:f7:68:
         87:1b:14:5b:19:db:3a:7b:5b:01:36:13:37:4e:0e:a8:a9:07:
         9b:4a:cf:29:19:f9:52:b9:6b:06:be:e6:c4:d9:0b:06:22:9c:
         e3:89:bd:b4:d3:ca:61:6b:02:79:84:82:b7:c8:87:39:fa:a4:
         6c:35:b7:cb:43:ad:59:0c:43:fb:a5:4c:05:cc:f9:c2:c6:49:
         c9:88:9c:22:5a:da:23:c8:4a:71:4a:e0:a8:f0:9a:11:e5:f6:
         1e:af:3c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----